Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa
File:                     3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa (raw, json)
Hash identifier:          vQvm8ssCA8oRDfp/t9lq/yeN393rTdHUettipaBNpT4=
Subject key identifier:   DC:57:57:BC:07:40:74:34:E3:1D:68:BB:84:35:BE:14:EC:E4:2D:22
Certificate issuer:       /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial:       053B2AD998192F06A54FAEF595B0474BF028092C
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa
Signing time:             Sat 15 Feb 2025 00:09:52 +0000
ROA not before:           Sat 15 Feb 2025 00:04:52 +0000
ROA not after:            Sat 14 Feb 2026 00:09:52 +0000
asID:                     265741
IP address blocks:        128.201.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3b:2a:d9:98:19:2f:06:a5:4f:ae:f5:95:b0:47:4b:f0:28:09:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
        Validity
            Not Before: Feb 15 00:04:52 2025 GMT
            Not After : Feb 14 00:09:52 2026 GMT
        Subject: CN=DC5757BC07407434E31D68BB8435BE14ECE42D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:24:ef:17:bf:5c:70:1d:0c:c4:42:dc:9c:
                    25:49:c8:48:e4:e4:08:26:27:f4:ca:3e:c0:36:30:
                    54:58:b3:8b:7d:53:c3:94:27:99:e4:bf:85:7a:fb:
                    68:21:42:69:ee:e0:8b:e2:4f:f4:bc:3e:67:27:b2:
                    58:c3:bd:98:37:9f:a6:81:00:b1:88:45:3d:1e:0d:
                    fc:a1:71:6a:44:d8:20:19:73:45:61:6e:6f:32:a2:
                    9a:3f:22:20:82:9a:75:90:71:28:b4:ae:8d:68:f9:
                    ce:78:3e:14:4a:c1:eb:68:ae:37:3c:c9:ee:0f:f4:
                    4b:80:a3:7c:fc:11:e0:6c:13:3b:3b:d9:e6:73:82:
                    b8:38:c3:f7:bf:15:da:c7:57:47:18:c9:f4:24:f7:
                    6a:52:8d:96:d3:c5:48:d7:89:1f:9a:a5:5a:bd:c3:
                    a6:e7:30:ba:62:b1:82:55:a2:fa:a2:fb:d5:2a:22:
                    41:62:ab:67:bc:f5:f6:39:cc:73:df:56:2e:f3:1f:
                    da:3f:da:0c:6d:42:cf:00:fb:68:9f:c5:99:b9:d5:
                    16:31:cd:92:f9:6c:e0:0c:35:86:61:55:4d:45:7c:
                    e3:df:a1:83:07:70:6c:d4:42:ea:ce:78:ff:4b:9e:
                    ce:35:00:dc:bf:80:28:5d:8c:36:c0:23:f6:4f:22:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:57:BC:07:40:74:34:E3:1D:68:BB:84:35:BE:14:EC:E4:2D:22
            X509v3 Authority Key Identifier:
                keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:52:ac:4f:48:63:43:4f:3b:39:86:9d:14:e5:3f:3a:5f:ae:
         1a:b1:43:d0:f1:43:41:82:8e:e8:ca:6b:a9:1c:26:48:61:48:
         1a:a1:a9:98:1a:2c:56:3b:eb:b1:f1:11:a4:c1:22:07:51:df:
         dd:ee:79:04:86:a8:1e:4f:f2:52:62:97:26:ad:c1:a2:16:7a:
         31:7a:9a:21:24:bd:cc:d3:e7:0c:51:cb:12:15:15:27:fb:f1:
         0a:2f:b7:97:e3:33:f3:f0:f1:ca:8e:f6:1c:65:ae:ae:ea:92:
         bb:38:52:af:03:8a:ac:3c:00:b0:c0:ce:b9:32:df:10:8a:9a:
         d0:a5:f4:a2:99:78:7d:da:7c:a0:72:0f:75:bc:f0:dd:a0:5b:
         9c:66:f8:46:f0:00:40:e3:73:57:fd:7a:7a:49:9c:36:0b:a4:
         d0:0a:41:86:28:e5:3a:fa:5e:0c:bc:e3:f1:78:cc:cb:01:f6:
         db:46:25:88:3e:20:8f:1b:89:d2:08:c4:ed:13:7b:9a:26:95:
         2c:95:8a:0a:4f:35:58:fc:a7:75:1b:01:07:78:ba:f0:55:f3:
         bf:a1:40:59:9d:96:65:d7:5c:44:88:46:fd:ad:1f:ab:f4:94:
         0c:79:8e:26:42:c4:c5:33:cd:30:51:f9:09:47:9c:93:91:9e:
         1c:2f:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:38 2025 by rpki-client